The PCI Security Standards Council has published what it calls “a minor revision” to the PCI Data Security Standard.
PCI DSS version 3.2.1 replaces version 3.2 to account for effective dates and Secure Socket Layer/early Transport Layer Security migration deadlines that have passed, a press release said.
The changes in PCI DSS v3.2.1 reflect modifications to the standard that will be in effect once SSL/TLS migration deadlines have passed. This will help organizations to accurately report how their implementations meet these existing requirements after June 30, according to the council.
PCI DSS v3.2.1 does not include any other additions or changes. Version 3.2 of the standard will remain valid through Dec. 31, and will be retired as of Jan. 1, 2019.
“This update is designed to eliminate any confusion around effective dates for PCI DSS requirements introduced in v3.2, as well as the migration dates for SSL/early TLS,” PCI SSC Chief Technology Officer Troy Leach said in the release. “It is critically important that organizations disable SSL/early TLS and upgrade to a secure alternative to safeguard their payment data.”
The new standard and a summary of changes from the previous standard are available now in the document library at the PCI SSC website.